Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier: WjzHkYRSRmXWwETycYMpbuJ43JjOASBIjzqjKl7zcvM=
Subject key identifier: 2A:8B:03:56:07:46:BF:3F:D5:53:B3:75:DA:41:E8:BC:47:8F:5A:10
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: 019A4F2B837E0B32BEA8FA17C0F97BCC1C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number: 0DF5
Signing time: Tue 04 Nov 2025 14:00:42 +0000
Manifest this update: Tue 04 Nov 2025 14:00:42 +0000
Manifest next update: Wed 05 Nov 2025 14:00:42 +0000
Files and hashes: 1: 3ZKIh733NIkz8A90ghZangf0O7w.roa (hash: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=)
2: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: TBitDFDt3SrMzrcm2jl63vlZs04qdFVWN30VodnzXlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:83:7e:0b:32:be:a8:fa:17:c0:f9:7b:cc:1c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Nov 4 14:00:42 2025 GMT
Not After : Nov 5 14:00:42 2025 GMT
Subject: CN=2a8b03560746bf3fd553b375da41e8bc478f5a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:68:22:eb:e5:06:26:05:2c:6f:a9:db:2a:
4a:1d:ef:4e:eb:26:4d:98:76:67:f6:68:91:cc:05:
e9:c2:da:02:cd:c6:c5:9c:52:ff:bc:4b:7d:d2:9f:
35:9d:4f:37:aa:43:ad:74:b2:fe:23:4b:af:fd:0f:
c4:f4:61:bb:d5:e6:9d:92:92:ab:f7:b9:af:4e:7f:
18:8b:58:4d:42:58:0c:37:b6:cf:9b:f3:97:c7:e8:
ca:02:12:13:67:1a:c0:d4:66:a8:03:ba:45:f5:88:
ea:4f:98:63:de:86:cf:7e:04:98:ee:e6:3d:a3:01:
07:d6:cd:f7:88:18:f4:ea:63:21:27:b6:fd:8f:4f:
53:80:62:68:1e:75:df:0a:5d:9a:5a:9f:ed:d7:e7:
d7:b3:b0:4f:06:e4:73:69:e2:f8:8a:62:dc:13:98:
e2:f5:4b:ce:ea:8c:e0:55:38:72:4e:74:02:a4:36:
d5:0d:6a:47:41:d8:12:1c:cc:d1:bf:d3:be:a4:a1:
21:9b:dd:4c:70:92:b4:7e:a4:cf:c4:47:f3:ed:c9:
2f:ae:1d:ac:8a:2e:0a:07:76:6e:2a:46:bc:c4:e2:
8f:56:14:c9:6e:ea:ef:09:52:66:e2:8b:ef:2b:92:
7f:73:f5:7f:f6:e7:03:9d:30:fc:37:6f:4f:cb:0d:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8B:03:56:07:46:BF:3F:D5:53:B3:75:DA:41:E8:BC:47:8F:5A:10
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d2:f0:30:e0:88:0d:71:8c:4c:24:ab:0b:97:6e:74:2e:cd:
0c:96:c1:d2:b1:94:fe:32:f4:41:fe:02:fb:68:4a:98:04:2d:
d0:24:1f:1c:68:47:80:f7:08:04:c0:88:46:5b:ec:1d:31:c4:
ba:bc:8c:16:6c:3d:cc:e8:28:20:7b:a8:b0:0a:45:45:e0:0d:
08:a6:e8:4e:7d:8c:c8:29:dc:ae:a2:ab:83:94:27:bd:fe:1e:
8f:4c:e3:b4:23:95:a0:99:5b:b5:33:b2:2c:5c:a7:62:fd:f9:
2a:71:c0:92:f3:1e:be:c5:7b:8a:6e:ff:2c:45:9a:63:23:e3:
2c:8c:45:30:52:ef:67:29:96:f5:f8:ae:ad:e8:4c:27:ee:ca:
15:57:7e:8f:cf:72:4f:47:1d:df:db:f9:bf:6a:87:24:27:2a:
cf:fb:d2:94:5a:3f:05:0e:17:48:a6:57:e7:60:70:61:94:00:
5e:b4:17:5d:ec:9e:ac:e7:25:1d:21:e4:72:bd:01:96:ff:8f:
28:dd:73:45:68:56:f1:52:9b:19:36:3c:1c:ae:13:a1:81:ef:
a0:86:13:69:68:70:7a:71:f3:18:bd:ef:3a:38:11:49:a2:33:
fb:b0:5a:fc:4b:16:10:00:5d:00:9e:3e:4c:73:69:12:40:6d:
0d:dc:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:10 2025 by rpki-client